All articles tagged with #homoglyph
Fraudsters are increasingly using homoglyphs—look-alike characters from different alphabets (like Cyrillic letters) in URLs and emails—to fool people into clicking fake links. Most phishing now relies on spoofed URLs rather than attachments; to defend, type known addresses manually, verify links by visiting the official site, keep your browser updated, enable 2FA/MFA, and report any suspected fraud or compromised credentials.
A new open-source, cross-platform tool called Tirith hooks into major shells to inspect pasted commands for dangerous URLs and other homoglyph tricks, blocking execution locally with sub-millisecond overhead. It defends against homograph domains, terminal injections, pipe-to-shell patterns, dotfile hijacking, insecure transports, supply-chain risks, and credential exposure, while performing analysis offline and without telemetry. It supports Windows, Linux, and macOS and can be installed via Homebrew, apt/dnf, npm, Cargo, Nix, Scoop, Chocolatey, and Docker. It does not hook cmd.exe and has limited independent testing at publication.